SELinux Agent Install

I have installed a Web and a Java agent, the host and main web agent are visible. So far so good but I do not see agents from apache (the module) and Tomcat/Jboss. Am I doing something wrong? I have no SELinux error messages anymore. Or is there a SELinux policy for Dynatrace Agents?

I've had to work with system engineers on getting Dynatrace to work with SELinux policies. As to what the policy rules are, I don't know, but, I know they had to make some sort of exception for Dynatrace agents.

Since I have a customer struggling with this issue and saw it mentioned lately in the forum, I thought I would try from scratch to get it working. I know nothing about SELinux other than what I skimmed on the link given above, so feel free to correct me if my way is totally off base.

Below are the steps I followed to get Apache httpd working with Dynatrace and SELinux running in Enforcing mode.

Using this link as my primary reference: http://wiki.centos.org/HowTos/SELinux, I performed the following steps:1. Installed dynatrace 6.1.0 on CentOS in /opt/dynatrace-6.1.0 with ownership dynatrace:dynatrace2. Set SELINUX=permissive and SELINUXTYPE=targeted in /etc/selinux/config3. Rebooted VM4. Started server, collector and web server agent5. Instrumented and started httpd (server httpd start) 6. Installed setroubleshoot package to get the "audit2allow" command7. Created a dynatrace module (cd /var/log/audit;audit2allow -M dynatrace < allow.log)8. Installed the dynatrace module (semodule -i dynatrace.pp)9. Set SELINUX=enforcing SELINUXTYPE=targeted in /etc/selinux/config10. Rebooted VM11. Started server, collector and web server agent12. started httpd (server httpd start)I can share the resulting "dynatrace.te" and/or "dynatrace.pp" if anyone would like to try it out.These are the contents of "dynatrace.te":

I worked with a customer today to get Apache working with the the version 6.1 dtwsagent in Linux with SELinux enabled. My initial "dynatrace.pp" was missing one permission, but after we corrected it, things seem to start working fine.

The dyantrace.pp (compiled) and dynatrace.te (human readable) files are available here: